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Abstract 

Using recent results in topos theory, two systems of higher-order logic 
are shown to be complete with respect to sheaf models over topological 
spaces — so-called "topological semantics" . The first is classical higher- 
order logic, with relational quantification of finitely high type; the 
second system is a predicative fragment thereof with quantification 
over functions between types, but not over arbitrary relations. The 
second theorem applies to intuitionistic as well as classical logic. 



Introduction 

Higher-order logic (also known as "type theory" ) is logic that includes quan- 
tification over functions or relations. Many basic mathematical objects and 
theories can only be defined using this logic; the natural numbers and topo- 
logical spaces are familiar examples. A more precise specification of what 
we call classical higher-order logic is given in §1 below. 

As is well-known, higher-order theories are generally incomplete with 
respect to (standard) models in Sets; that is, T |= a does not imply Thd 
for T a theory in higher-order logic and b the entailment relation of any 
reasonable deductive calculus. It is by now also well-known that higher- 
order logic can be modeled in suitable generalized categories of sets, namely 
(elementary) topoi, and that with regard to such topos-valued semantics, 



standard higher-order deduction is complete (see 11] for details). 

Our results in this paper are concerned with topos models of a very 
special and natural kind, namely sheaves over topological spaces. If X is 
a space, a model in the category Sh(X) of all sheaves on X shall be called 
a topological model. We will show that higher-order logic is complete with 
respect to such models; for the reader unfamiliar with sheaf theory, we wish 
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to emphasize their elementary topological character. Under the equivalence 
Sh(A) ~ Etale/A a sheaf on a space X is essentially the same thing as 
an etale space over X: a space E equipped with a local homeomorphism 
p : E — > X (also called an etale bundle). The various fibers p~ 1 x of E (the 
stalks of the sheaf) for the points x G X may be regarded as sets varying 
continuously over X. A morphism of etale spaces is just a continuous map 
/ : E — > E' over X, i.e. with p'f = p as in the commutative triangle 

f 

E - E' 



X. 

Products, exponentials ("function spaces"), etc. of etale spaces of course 
agree with those calculated as sheaves. A topological model of a single- 
sorted theory thus consists of an etale space p: E — > X over a base space X 
together with suitable operations, which are simply continuous maps over X. 

As the reader who is familiar with sheaf theory will have noted, our 
topological models are just what are usually called "sheaves of . . . s" , at 
least in the case of equational, first-order theories. Thus a topological model 
of the theory of groups is a sheaf of groups, and so on. 

Despite the ultimately simple character of topological models, we use 
the more general language and methods of sheaf theory and topoi to study 
them. Our first theorem, proved in §3 below, asserts the completeness of 
standard, classical higher-order deduction h c with respect to such topological 
semantics. 

Theorem A. Let T be a higher-order theory. There exists a classical topo- 
logical model MofT such that, for any higher-order sentence a in the lan- 
guage of T, 

Th c ff if and only if M \= c a. 

Moreover, the model M has the property that every continuous function 
between the interpretations of type symbols is logically definable. 

What permits theorem A to be true is our notion of a classical model. In 
an arbitrary topological sheaf topos Sh(A) there are two natural candidates 
for the interpretation of the type 2 of formulas (or "propositions" , or "truth 
values") of a higher-order theory; to wit, the sheaf O of open subsets of 
X and the coproduct 1 + 1. In the language of etale spaces, 1 + 1 is the 
double covering X x 2 — ► X. As detailed in §2 below, a classical model 
uses the latter to interpret the type of formulas. Function and power types 
are then interpreted as exponentials of sheaves (sometimes called "internal 
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horns" or "sheaf- valued homs"). This standard treatment of exponentials is 
what chiefly distinguishes topological models from so-called Henkin models 
(see the appendix below for the exact relation between the two). Thus in 
particular, for any type Z the power type 2 Z is interpreted as the sheaf of 
complemented subsheaves of the interpretation of Z. By further requiring 
of a classical model that the types be interpreted by so-called decidable 
sheaves, we can model classical higher-order logic in non-boolean topoi like 
Sh(X), which is impossible when interpreting the type 2 by the subobject 
classifier ft. Indeed under that interpretation the analogue of theorem A 
fails — even permitting arbitrary Grothendieck topoi in place of topological 
sheaf topoi — as can be seen using Godel incompleteness. 

The issue of how to interpret the type of formulas of course vanishes when 
one considers the fragment of higher-order logic that results from omitting 
that type. This fragment — which we call A-logic and describe in §4 below — 
may be regarded as a marriage of elementary logic and the A-calculus. In 
addition to the usual propositional and quantificational language of elemen- 
tary logic, it includes equations between and quantification over functions, 
functions of functions, etc. But since there is no type of formulas, there is 
no quantification over "propositional functions", i.e. over relations. 

Many familiar mathematical constructions, theorems, and proofs can be 
formalized in A-logic. A simple example is Cayley's theorem that every 
group is isomorphic to a group of permutations of its elements. The axiom 
of choice, in the familiar form 

Vx G X3y G Y.(p(x, y) 3f G Y x Vx G X.(p(x, fx), 

is also a statement of A-logic. An example of a (non-elementary) A-theory 
is synthetic differential geometry, applications to which of the present work 
shall be discussed elsewhere. 

Our theorem B states the completeness of A-logic with respect to topolog- 
ical models. More generally than theorem A, theorem B holds for standard, 
intuitionistic deductive entailment K 

Theorem B. Let T be a \-theory. There exists a topological model MofT 
such that, for any X-sentence a in the language of T, 

Thff if and only if M \= a. 

Moreover, the model M has the property that every continuous function 
between the interpretations of type symbols is logically definable. 

Theorem B rests more squarely on one of the main supports of theorem 
A, namely a recent covering theorem for topoi due to the second author and 
I. Moerdijk. This covering theorem is the real heart of our completeness 
theorems; we sketch its application to our situation as an appendix to this 
paper. So as not to obscure the conceptual simplicity of this application, our 
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treatment of the standard details of higher-order syntax and topos semantics 
is held quite brief. 

Before getting down to business, we make two remarks on the statements 
of the completeness theorems. First, each has the form "there exists a model 
M such that T h a just if M (= a", rather than the more familiar (for 
set-valued semantics) "T h a just if for all models M, M (= a ". The 
stronger form given here is made possible by considering models in topoi 
other than Sets. The situation is analogous to that of the familiar Heyting- 
valued completeness theorem for first-order intuitionistic logic ||, which 
follows directly from our theorem B and indeed is the inspiration thereof. 
Second, and more substantially, the additional "Moreover ..." clause of each 
theorem states a further property of the respective logical system that may 
be termed "definitional completeness". It ensures that any function which 
is "present in every model" is logically definable. As in the case of deductive 
completeness, this definitional completeness is established in a strong form 
simply by exhibiting a single model in which every function of suitable type 
is definable. In light of the topological nature of the models at issue here, 
logical definability then coincides with continuity in that "minimal" model. 
For further discussion of this property (in the context of the A-calculus) we 
refer to Q. 

Acknowledgments. We have both benefitted greatly from conversations 
with Ieke Moerdijk on the spatial covering theorem and its logical applica- 
tions. The Stefan Banach Mathematical Research Center in Warsaw, and 
the organizers of the Rasiowa memorial conference held there in December 
1996, are thanked for supporting our collaboration. 



1 Theories in classical higher-order logic 

The systems of classical higher-order logic that we consider are essentially 



the same as those presented in [|4j, 11 1 , which in turn are modern formulations 



of Q. We summarize one particular formulation for the reader's convenience 
and for the special purposes of §4. 

Type symbols are built up inductively from a given list of basic type sym- 
bols X\ , . . . , X n and the type of formulas 2 by the type-forming operations 
Y x Z and Z Y . 

Terms are built up inductively from variables and a given list of basic 
terms c%, . . . ,c m . Each variable and basic term has a type. The terms and 
their types are as follows, writing r : Z for "r is a term of type Z" . 

• If n : Z\ and T2 : Zi-, then {t\,T2) '■ Z\ x Zi- 

• If r : Z\ x Z2, then tt\{t) : Z\ and ^(r) : Z^- 

• If r : Z and y is a variable of type Y, then Xy.r : Z Y . 
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• If a : Z Y and r : Y, then a(r) : Z. 

• If r, r' : Z, then r = r' : 2. 

• If 99, -0 : 2 and y is a variable of type Y", then the following are terms 
of type 2: 

T, _L, -xp, pAip, tpVip, <p^ip, 3y.p. 

A basic language (or signature) consists of basic type symbols X\,... , X n 
and basic constant symbols c±, . . . ,c m . A theory consists of a basic language 
and a list of sentences (closed formulas) ci, . . . , o~k therein, called axioms. 
Given a theory T, the language C(T) of T is the set of terms in the basic 
language of T. 

The entailment relation p h ip between formulas is specified in the usual 
way by a deductive calculus. To include the possibility of "empty" types, it 
is convenient to give a family of entailment relations p h x ip indexed by lists 
x = (xi, . . . , Xj) of distinct variables including all those occurring free in p 
and ip. These relations are generated by the following conditions ("rules of 
inference" ) : 

1 . Order 

(a) p h x p 

(b) p\- x tp and ip h x 1) implies p h x 1) 

(c) p \- x , y ip implies p[r/y] h x ip[r/y] 

2. Equality 

(a) Th x r = T 

(b) r = t' h x (^[r/y] ^[r'/y] 

(c) 1? h x p =4> and 1? h x ip =4> 99 implies $ h x 92 = 

(d) Vy.a(y) = /%) h x a = 

3. Products 

(a) T h x (ttit, 7r 2 r) = r 

(b) T h x n i (T 1 ,T 2 ) = n, i = l,2 

4. Exponents 

(a) T h x (Xx.t)(x) = t 

(b) T h x Xx.a(x) = a 
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5. Elementary logic 

(a) _L h x p 

(b) ip h x T 

(c) (p h x -tip iff <p A V" l~x -L 

(d) i? b x v? and # b x V iff $ \- x p A tp 

(e) i? V </> h x ip iff i? h x ip and 92 h x ^ 

(f) $Aph x ip iff tfb x <^^ 

(g) hx, y 99 iff b x Vy.p 

(h) 3y.tf h x ^ iff h x , y 99 

In the foregoing, the r's are arbitrary terms; <p, ip, •& are formulas; and a, (3 
are terms of the same exponential type. In writing e.g. p[r/y] h x ip[r/y] in 
1(c) it is assumed that p[r/y] and ip[r/y] are formulas with no free variables 
apart from x\, . . . , Xf, so the term r must have the same type as the variable 
y and no other free variables. As usual, the substitution notation p\r jy\ is 
understood to include a convention to avoid binding free variables in r. 

A sentence a is called provable if T h cr, also written h <r. For a theory 
T, the notions of T-entailment and T -provability are given by adding the 
rules h a for each axiom cr of T. 

The classical entailment relation h c results from b by adding the rule 

b c Mp.p V -ip. 



Remark 1. It is sometimes convenient to give a more succinct statement of 
the logical calculus by defining some of the logical primitives in terms of oth- 
ers. We mention one particularly simple primitive basis which will be useful 
in the next section (cf. [11]). Exponential types Z Y occur only in the form 
2 Y ("power types", usually written P(Y)); A-terms Ax. p and evaluations 
a(r) are then restricted accordingly, and more naturally written {x|(/?} and 
r € a. Projection operators 7Ti(r) are eliminated in favor of additional rules 
of inference. The logical operations T, JL, -i, A, V, =>, V, 3 are defined in 
terms of = and (— , — ), {x\— }, 6. We shall use the fact that this primitive 
basis suffices in the following way: to interpret the language of a theory it 
suffices to interpret the basic language, the type of formulas, product and 
power types, and the term-forming operations (—, —), {x\— }, G, =. 

In the opposite direction, one can enlarge the primitive logical basis by 
including basic relation and function symbols in addition to basic constant 
symbols, although these are not needed in the presence of higher relation 
types. Relation symbols will be useful in §4, however, where there is no type 
of formulas; and both relation and function symbols are used in elementary 
logic, where there are no higher types at all. 
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2 Semantics in topoi 



Let T be a theory in classical higher-order logic, as defined in the foregoing 
section. It is fairly obvious how to interpret T in an arbitrary boolean topos 
B: An interpretation M of T in B assigns to each basic type symbol X an 
object Xm of B, and to the type 2 of formulas, the coproduct lg + lg in B 
(which is the subobject classifier), 

2m = 1b + Is- 

The interpretation M is then extended to product and power types by setting 

(Y x Z) M = Y M x Z M (product in B), 

(2 y ) M = (2 M ) (Ym } (exponential in B) . 

On terms, M assigns to each basic constant symbol c of T, having say type 
Z, a morphism 

cm '■ 1b — ► Z M 

of B, and variables are interpreted as identity morphisms. The interpretation 
is then extended inductively to all terms in C(T) in the evident way, using 
the internal logic of B (cf. §§VI.5-7], also for the external meaning of 
the logical operations thus modeled). For example, 

(r = t') m = 5o (t, t') m , 

where 5: Zm X Zm — > 1b + 1b classifies the diagonal morphism A = 
{lz M> lz M ) : Zm ^ Zm x Zm, when Z is the type of the terms r, r'. 

In particular, M assigns to each formula <p(yi, ■ ■ ■ ,y n ) with free variables 
Hi of types Y{ a morphism 

(p(yx, ... , y n ) M ■ {Y\)m x ... x (Y n ) M — > 1b + 1b 

of B. A sentence a is said to be true in M, written M \= a, if 

a M = true: l B -> 1 B + 1b, 

where true: lg — > lg + lg is the first coproduct inclusion, which is the 
universal subobject. Of course, an interpretation M is a model of T if each 
axiom of T is true in M. 

2.1 Representing the category of models 

Given models M and of a theory T in a boolean topos B, there is an 
evident notion of an isomorphism h : M — ► N of T-models, namely a family 
of isos h = (hx : Xm — * -Xjv) (indexed by the basic types X of T) that 
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preserve the interpretations of the constant symbols of T, in the obvious 
sense. Together with the evident composites and identities, one thus has 
for any theory T and any boolean topos B a category of models of T in B, 
denoted 

Mod T (£). 

Observe that Modx(£>) is always a groupoid, i.e. a category in which ev- 
ery morphism is iso. For example, if T is the theory of topological spaces and 
B is the topos Sets, then Modx(<6) is the category of all topological spaces 
and homeomorphisms. One can of course also consider other morphisms of 
models, but the groupoid of isomorphisms suffices for our purposes. 

A logical morphism between boolean topoi plainly preserves models and 
their morphisms. Such a functor /: B — > B' therefore induces a functor 

Mod T (/) : Mod T (£) -» Mod T (£') 

(a groupoid homomorphism) on the associated categories of models. 

Now, every theory T in classical higher-order logic has a (higher-order) 
classifying topos, a boolean topos Bf determined uniquely (up to equiva- 
lence) by the property: for any boolean topos B there is an equivalence of 
categories, natural in B, 

(1) Log(£ T ,£) ~ Mod T (£), 

where Log (St, B) is the category of logical morphisms Bf — > B and natu- 
ral isomorphisms between them (cf. 0]). The classifying topos Bj can be 



constructed "syntactically" from £(T) in the style of j|, lXf] ; in particular, 
it is a small category (indeed, it is countable). In virtue of its universal 
mapping property ([[]), Bf is freely generated as a boolean topos by the 
"universal model" Uj G 'M.odf(Bj) associated to the identity logical mor- 
phism Bf — > B under ([[]) • By the syntactic construction of Bf this universal 
model has the following properties, which we record for later use: 

Proposition 2. (i) For any sentence a G C(T), 

T h c a just if Uf \= a. 

(ii) For any types Y and Z and any morphism f : Y\j T — » Zjj t in Bf, there 
is a formula (p(y, z) G £(Y) such that 

graph(/) = {(y,z) | cp(y,z)}u T 

(as subobjects ofYu T x Z\j r ). 

Observe that (i) of proposition ^ and the universal mapping property (|l|) 
together entail the soundness and completeness of the deductive calculus of 
§1 with respect to topos semantics: T h c a if and only if for every T- model 
M, M (= a. 
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2.2 Classical semantics 



We now extend the foregoing topos semantics for classical higher-order logic 
to non-boolean topoi. Let T be a fixed theory and £ an arbitrary topos. We 
begin with a bit of notation: Let true: Is — > Sis be the subobject classifier 
in £ , and let us write 

| — | = (true, false) : Is + Is — * Sis 

for the canonical map from the coproduct which, observe, is a monomor- 
phism. An arbitrary morphism ip: E — > Sis of £ factors through | — | just if 
the subobject S v >— > E it classifies is complemented, i.e. if there is a subob- 
ject S >— > £" with + 5 = £" (canonically). When this is the case, let us 
write Tp : E — > Is + Is f° r the unique morphism such that 

<P = 

as indicated in 

E - -- Is + Is 




Sis- 

Recall that an object E of £ is said to be decidable if its diagonal A: E >— » 
E x E is complemented, thus just if <5: i£ x E — > 1^ + 1^ exists. 

Next, we define an interpretation of the basic language of T in £ exactly 
as in a boolean topos; in particular the type 2 of formulas is interpreted as 
Is + Is, which is plainly decidable. An interpretation M such that for each 
type symbol Z the object Zyi in £ is decidable shall be called a classical 
interpretation (or c-interpretation) . 

Finally, by remark |l| any c-interpretation M can be extended to all of 
C(T) exactly as in a boolean topos, by interpreting the term- forming oper- 
ations ( — ,—), {x\ — }, £ as before and taking 5: Zm x Zm — >■ If + lg to 
interpret = at each type Z. Thus just as before a c-interpretation M assigns 
to each formula y(yi, . . . , y n ) with free variables of types 3^ a morphism 

<p(yi, . . . , y n ) A / : {Y X ) M x . . . x (y„) A f — >• If + If- 

Definition 3. The relation |= c of satisfaction for c-interpretations is de- 
fined by: 

M \= c a iff \a M \= true. 
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Thus a c-interpretation M satisfies a sentence a just if the following triangle 
commutes 



0~M 



If + l£ 




A c-model of the theory T is of course a c-interpretation that satisfies 
the axioms of T. A c-interpretation M is therefore a c-model just if for each 
axiom a the interpretation 



0"M- If 



is the first coproduct inclusion, just as in the boolean case. Indeed, if the 
topos £ is boolean, then every object is decidable, and a c-model in £ is the 
same thing as a model. 

Proposition 4 (Soundness). If M is a c-model then for any sentence a, 

T h c a implies M \= c a. 

Proof. Consider the classifying topos Bj with universal model Uj. There is 
an evident functor m : Bj — > £ with M = m(Uj) and 

for each sentence a. Although m is not logical if £ is not boolean, it still 
takes true : lg T — > 1b t + lg T to true : If — ► + If. The claim thus 
follows from the soundness of standard topos semantics (in particular, from 
proposition |2|) . □ 



Remark 5. If the interpretation Zm is decidable then for any type Y the 
canonical inclusion (Zmp Ym ' >—> Qy MXZM > factors as indicated in the fol- 
lowing diagram. 

(1 £ + 1 £ )Vm*Zm) 




(Y M xZ M ) 



Thus even when defined in terms of power types as mentioned in remark 
the exponential types Z Y are still interpreted as exponentials by a c- 
interpretation. 
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3 Topological completeness 



In this section we consider small topoi equipped with the finite epi topology. 
The covering families for this Grothendieck topology on a topos £ are finite 
families of morphisms (Cj — > E)i such that the canonical map JJ. C, —* -E 
is epic. Of the following two technical lemmas, we omit the straightforward 
proof of the first; its second part is folklore. 

Lemma 6. (i) The finite epi topology is subcanonical. 

(ii) For each morphism e : E' — > E in £, the sheafified Yoneda embedding 
y : £ — > Sh(£) preserves not only the pullback functor e* : £/E — » 
£/E' , but also its left and right adjoints, 

S e H e* H n e : -» 

(Indeed, this is true for any subcanonical topology on a small category 
and any locally cartesian closed structure present there.) 

Lemma 7. Let F: B ^ £ be a left- exact functor from a boolean topos B to 
any topos £. If F is continuous for the finite epi topology then it preserves 
finite coproducts and first- order logic. If F also preserves exponentials, then 
it preserves c-models. 

Proof. An object of a topos has an empty covering family for the finite epi 
topology just if it is initial; so the continuous functor F preserves initial 
objects. The coproduct inclusions B\ , F>2 >— > B\ + F>2 are a covering family 
of monos with B\ A B2 = >— > B\ + B%. Since F is also left-exact, it then 
preserves coproducts as well. Moreover, it then preserves boolean comple- 
ments of subobjects, whence it preserves negation -1 since B is boolean. The 
logical operations and V are then also preserved, since in a boolean topos 
these can be constructed from negation and operations that are preserved 
by left-exact, continuous functors generally. Finally, if F also preserves ex- 
ponentials then by the foregoing it preserves the interpretations of all types 
and the associated term-forming operations, in addition to first-order logic; 
whence it clearly preserves c-models. □ 

Theorem A will now follow by applying the covering theorem of the 
appendix, which states that every Grothendieck topos with enough points 
can be covered by a topological space via a connected, locally connected 
geometric morphism. We remind the reader that a Grothendieck topos Q 
is said to have enough points if the geometric morphisms p : Sets — > Q 
are jointly surjective (i.e. if the inverse images p* : Q — * Sets of these are 
jointly faithful), and that a geometric morphism /* H /* : £ — > J 7 of topoi 
is connected if the inverse image functor /* is full and faithful, and locally 
connected (M: "molecular") if /* commutes with II- functors. 
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Theorem A. Let T be a higher-order theory. There exists a topological 
space Xj and a c-model M ofT in Sh(Xj) such that: 

(i) for any sentence a G £(T), 

T h c a if and only if M \= c a; 

(ii) given types Y,Z, every continuous function f : Ym — > Zm over Xf is 
definable: there is a formula ip(y, z) G £(Y) such that 

graph(/) = {(y,z)\ip(y,z)} M 

(as subsheaves ofYu x Zm)- 

Proof. First, one has the universal model Uj in the classifying topos Bj, 
as in §2.1. The Grothendieck topos Sh(^f) of sheaves on Br for the finite 
epi topology is coherent, and so has enough points (cf. |@). The covering 
theorem of the appendix therefore guarantees the existence of a topological 
space Xj and a connected, locally-connected geometric morphism 

m: Sh(X T ) Sh(Br). 

The inverse image m* : Sh(^f) — > Sh.(Xj) of m satisfies all hypotheses of 
the foregoing lemma ^, as does the sheafified Yoneda embedding 

y: Bj^Sh(Bj). 

In particular, these functors preserve exponentials since they preserve II- 
functors (using lemma ^). The composite m* o y: Bj — > Sh(Xj) therefore 
also satisfies the hypotheses of lemma 0, whence one has the c-model 

M = m* o y(Uj) 

in Sh(Xx). Since each of its factors is full and faithful, so is the functor 
m* o y; the assertions (i) and (ii) thus follow from proposition ^. □ 

Remark 8. (Infinitary generalizations) Theorem A clearly applies equally 
to "theories" T with infinitely many type and/or constant symbols and/or 
axioms, since in such cases the foregoing proof can begin with a small topos 
Bj which is a suitable colimit of classifying topoi for (finite) theories. We 
also merely mention that for the case of infinitary logic, with set-indexed 
meets and joins of formulas, a theorem analogous to theorem A holds, with 
complete Heyting algebras in place of topological spaces. 
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4 A-logic 



What we call A-logic differs from classical higher-order logic in that it has no 
type 2 of formulas. Type symbols are now built up inductively from basic 
type symbols by the operations — x? and — ? . Terms are built up inductively 
from variables, basic constant symbols, and just the term-forming operations 
(— , ?}, 7Ti(— ), 7T2(— ), Xy.(-), and ?(— ). Formulas are then constructed from 
terms and basic relation symbols in the customary way, using the language 
of first-order logic with equality. Finally, a X-theory consists of (finitely 
many) basic type, constant, and relation symbols, and closed formulas in 
these parameters. 

As rules of inference for the (intuitionistic) entailment relation ip h x tp 
on formulas one may take a standard deductive calculus for (intuitionistic) 
many-sorted, first-order logic with equality, augmented by the usual rules 
for the (typed) A-calculus. Indeed, the rules given in §1 above are suitable, 
under the omission of 2(c). 

The notion of a model of a A-theory in a topos is essentially the same 
as that already given in §2. It is, however, now more natural to interpret 
basic relation symbols and other formulas by subobjects (rather than their 
classifying morphisms), as is usually done for first-order logic (cf. Jl^]). In 
particular, the equality sign = is interpreted in the standard way as a diag- 
onal morphism, and since classical logic is not being assumed, the notion of 
a c- model is not required. 

Deduction is clearly sound with respect to such semantics. To show that 
it is also complete — even with regard to just topological models — one can 
proceed as in the classical higher-order case in §3: 

(i) Construct the syntactic category Sj of provable equivalence classes of 
formulas, to be equipped with the finite epi topology (which is sub- 
canonical) . 

(ii) Apply the sheafified Yoneda embedding y: Sj — > Sh(5x) (which pre- 
serves A-logic by lemma ^) to get a full and faithful model in a Grothen- 
dieck topos with enough points. 

(iii) Apply the covering theorem of the appendix to get a connected, locally 
connected geometric covering map Sh(Xx) — > Sh(5ir) from a topolog- 
ical sheaf topos Sh(Xx). 

We leave it to the reader to fill in the details of this sketch to provide the 
proof of the following. 

Theorem B. Let T be a X-theory. There exists a topological space Xj and 
a model M ofT in Sh(Xj) such that: 

(i) for any X-sentence a in the language ofT, 

Thu if and only if M \= cr; 
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(ii) given types Y, Z , every continuous function f : Ym —> Zm over Xj is 
definable: there is a X-formula <p(y, z) in the language of T such that 

graph(/) = {(y,z)\ip(y,z)} M 

(as subsheaves ofYu x Zm)- 

Appendix: The spatial cover 

In the proofs of theorems A and B, use was made of the following covering 
theorem for topoi, which is part of theorem 13.5 of || (also see ||; cf. [1C] 
for a related result). 

Covering theorem. For any Grothendieck topos Q with enough points there 
is a topological space Xg and a connected, locally connected geometric mor- 
phism 

<f>: Sh(Xg)^G. 

Thus in particular the inverse image functor c/>* : Q —* Sh(Ag) is fully faithful 
and preserves exponentials and the internal first-order logic of Q. 

The purpose of this appendix is to describe the space Xg and the covering 
map <j>: Sh(Xg) — ► Q in the case of principal interest here, namely when 
Q = Sh(£>Tr) for £>t the small classifying topos of a (classical) higher-order 
theory, equipped with the finite epi topology. Thus we consider the situation 
of theorem A; that of theorem B of course has a similar description. Before 
going into details, let us mention that in fact there are many different spaces 
which will do the job, depending on various parameters that one is free to 
choose. We exhibit here just one such choice, intended to be illuminating. 

To begin, recall from || that classical higher-order logic is complete with 
respect to general models, nowadays called Henkin models. The basic fea- 
ture of a Henkin model M of a theory T is that a function type Z Y (or 
power type 2 Y ) is interpreted by a subset (Z y )m C (Zm)^ Ym ^ of the set of 
all functions from Ym to Zm (resp. of the power set pYm), rather than by 
the set itself. Of course, certain closure conditions also have to be satisfied. 
We mention only by the way that such models can be shown to arise "nat- 
urally" as images of the universal model Uf under continuous, left exact 
functors Bj — » Sets, and that the said completeness can be inferred from 
this fact. For the following, it will be convenient to define the underlying 
set or universe \M\ of a Henkin model M to be the (disjoint) union of the 
sets Zm for all types Z, 

\M\ = \J{Z M I Z a type}. 

To define the space Xf for the topos Sh(£>x), fix a sufficient set Sj of 
countable Henkin models M of T, i.e. Si satisfies: 

M H a for all MeS T implies T h a 
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for all T-sentences a. For example, we could take (a set of representatives 
of) all countable Henkin models of T as the set Sj. We then define a labeling 
of a Henkin model M in St to be a partial function 

N D dom(a) -^U |M| 

such that for each a € |M| the fiber a -1 (a) is infinite. 

The points of the space Xf are labeled Henkin models in St, i.e. pairs 

(M, a) 

where M G St and a is a labeling of M. The topology is generated by basic 
open sets of the form 

U<p<z),n = {(M,a) | a(nj) is defined and of type Zi, 

and M \= <p(a(m), ... ,a(n m )) } 

for </j(z) = ip(z\,... ,z m ) a T-formula and fi = (m 3 . . . , n TO ) a tuple of 
natural numbers. 

To describe the covering map 4>: Sh(Xj) — > S1i(,6t) we sketch the con- 
struction of the c-model in SIi(Xt) induced by 0*. Here we use the 
equivalence, mentioned in the introduction, SIi(Xt) ^ Etale/Xj of sheaves 
on Xj and etale bundles over Xj. For each type Z we have the set 

Z$ = ^m, 

(M,a)£X T 

with the evident projection 

TTz- Z$ — > Xf . 

We generate a topology on Z$ by declaring to be open: 

• the sets 7r^ 1 (J7) for U C Xj open (thus making irz continuous), 

• the sets V n = {(M, a, a) \ a € Zm, a(n) is defined, and a(n) = a}. 

It is easily checked that ttz then becomes a local homeomorphism (an 
etale map). The assignment Z i— > Z§ extends in the obvious way to a 
left exact, continuous functor Bj — > Sh(XT) that preserves exponentials, 
inducing the covering map 4>: SIi(Xt) — ► Sh(jBT). Finally, the stalk x*$ of 
the c-model ^ at a point x = (M, a) of Xj is just the Henkin model M 
itself, which gives the relationship between our results and ||. 
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